On Dec 1, 2011, at 1:50 PM, Pat Hall DDPMOSTL wrote: > In attempting to determine whether a given GPG public key is still in the > "acceptable" category of U.S. NIST SP 800-131A standards as of 2011, for DSA > keys I need to be able to verify both the |p| and |q| lengths. > > In particular, I need to verify that DSA keys have |p| >= 2048 bits AND have > |q| >= 224 bits. > > I can see numbers in the below examples of a DSA key of pkd:1:160 and > pkey[1]: [160 bits] - these look like the |q| value (which is in the > "Deprecated from 2011 through 2013, and Disallowed after 2013 range), but I'd > like verification that.
Yes. When listing a DSA key or subkey, the lengths given in pkd:0 or pkey[0] are for "p", and the lengths given in pkd:1 or pkey[1] are for "q". David _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
